Workspace boundary
Live membership is checked before a private resource lookup.
Security and control
Authority comes before data.
Workspace membership, module state, evidence, and explicit decisions control every private workflow.
Module boundary
A disabled module starts no feature query, task, or provider call.
Evidence boundary
Accepted evidence keeps its source, freshness, and review state.
Decision boundary
People control acceptance, publication, sending, and outcomes.
Provider boundary
A missing provider removes automation without blocking manual work.
Public boundary
Public releases and participant surfaces receive exact limited access.